Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/c4ThLheC0S_vE9BlNe9_XvbUu10.roa
File: c4ThLheC0S_vE9BlNe9_XvbUu10.roa (raw, json)
Hash identifier: 3SLiorOViHkcLrTREsPp0au6tiTWKDaOhsdqssiaLkk=
Subject key identifier: 73:84:E1:2E:17:82:D1:2F:EF:13:D0:65:35:EF:7F:5E:F6:D4:BB:5D
Certificate issuer: /CN=baa63d3ba6dae4a4493bc14a675b94ad2aa45b69
Certificate serial: 018572035411219D3FFE9EA71560774290E3
Authority key identifier: BA:A6:3D:3B:A6:DA:E4:A4:49:3B:C1:4A:67:5B:94:AD:2A:A4:5B:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqY9O6ba5KRJO8FKZ1uUrSqkW2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/c4ThLheC0S_vE9BlNe9_XvbUu10.roa
Signing time: Mon 02 Jan 2023 10:24:58 +0000
ROA not before: Mon 02 Jan 2023 10:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 31.217.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:54:11:21:9d:3f:fe:9e:a7:15:60:77:42:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa63d3ba6dae4a4493bc14a675b94ad2aa45b69
Validity
Not Before: Jan 2 10:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7384e12e1782d12fef13d06535ef7f5ef6d4bb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f5:a3:3e:72:bc:c9:1c:e0:bb:15:49:93:70:
45:a5:a0:8b:0c:e7:1b:98:fd:3e:12:8b:db:49:40:
8f:99:f2:32:bb:38:d4:17:f3:05:4b:e6:6f:ad:35:
00:29:1e:0f:b7:e5:6d:b5:3f:ed:c9:3c:44:f5:bf:
8d:20:01:0a:f9:c3:3f:3e:f2:40:07:5a:a2:5f:07:
0e:92:c7:92:26:c6:ba:00:08:46:5f:49:2f:24:e9:
bc:37:36:e4:9d:4f:ee:60:51:54:66:f6:8f:5a:6b:
7a:4a:63:69:49:2d:58:5f:96:ae:d0:d1:25:3b:5f:
9f:b5:ac:6f:9c:07:79:6a:1b:e3:fd:0d:c1:1f:6a:
19:7d:34:5c:83:42:58:95:01:b8:bb:e8:2f:aa:8f:
68:e5:44:18:56:21:71:83:d9:56:5f:64:19:e6:3a:
e2:87:09:86:a9:64:e2:2b:49:8d:d6:92:87:a6:b0:
45:dc:c1:38:92:8f:b2:14:a7:08:3d:f5:7b:c4:e5:
93:5b:63:84:14:17:07:c7:4e:2c:53:8b:08:e3:af:
8b:00:f0:a7:21:6b:17:82:ca:e3:eb:35:c2:35:e3:
8d:a3:6a:5c:f9:a0:f5:17:de:06:3b:05:21:46:c8:
2d:5b:ca:d2:84:ac:a8:5f:a9:87:e0:cf:d0:ea:92:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:84:E1:2E:17:82:D1:2F:EF:13:D0:65:35:EF:7F:5E:F6:D4:BB:5D
X509v3 Authority Key Identifier:
keyid:BA:A6:3D:3B:A6:DA:E4:A4:49:3B:C1:4A:67:5B:94:AD:2A:A4:5B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqY9O6ba5KRJO8FKZ1uUrSqkW2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/c4ThLheC0S_vE9BlNe9_XvbUu10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/185e80-7339-4cc0-8b7c-4edf4244a9f9/1/uqY9O6ba5KRJO8FKZ1uUrSqkW2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.248.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b2:bc:24:92:76:04:e3:e2:89:79:2d:f6:3f:9e:bc:36:15:
58:27:13:7f:29:90:66:a7:2c:f1:7f:bf:85:09:8e:d5:52:23:
e4:58:63:d8:f2:74:55:b2:bb:5c:d4:2d:1d:03:f3:12:65:ae:
90:81:55:a4:da:8b:a7:97:cc:37:99:8f:fe:6e:dd:84:0a:6f:
d5:de:2a:8c:5f:f5:24:95:71:c9:b8:2f:63:ea:2c:69:0b:71:
47:02:76:38:80:e2:69:3f:3a:73:0c:b2:36:11:81:a9:0c:06:
cc:e3:ce:02:1d:af:50:d7:78:04:0f:ed:d3:4f:9a:44:2f:aa:
9d:3b:8f:ab:42:04:79:a1:4d:e8:54:d4:46:06:7a:7b:bc:db:
c1:67:7e:bc:d1:c1:ba:45:47:9e:3e:51:66:18:d4:cb:ec:2c:
65:ef:67:96:95:66:b5:f1:9e:f5:11:44:55:19:f7:40:f2:01:
cb:77:96:a3:cc:7e:f3:22:0b:e8:e7:dc:9a:2f:eb:c3:e4:bb:
5e:94:2d:cb:be:9a:f1:b2:6e:89:9e:2e:c1:6c:c6:3b:a0:44:
19:5d:91:b6:88:9b:41:3d:e1:94:d9:91:54:ed:85:f3:6d:ab:
cc:db:47:e9:d2:8c:2d:c7:11:d9:1c:a3:50:7c:63:a6:cb:0f:
a8:65:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:52 2024 by rpki-client on console-fra.rpki-client.org